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Medical  Defense  Against  Protein  Toxin  Weapons 

Review  and  Perspective 


Charles  B.  Millard 


1.  PROTEIN  TOXIN  WEAPONS 

The  term  “toxin  weapon”  has  been  used  to  describe  poisons,  classically  of  natural 
origin  but  increasingly  accessible  by  modern  synthetic  methods,  which  are  suitable  for 
delivery  on  a  battlefield  in  a  form  that  causes  death  or  severe  incapacitation  at  rela¬ 
tively  low  concentrations  (reviewed  in  ref.  1).  Several  of  the  most  important  toxin 
weapons  are  proteins,  and  these  molecules  are  the  focus  of  this  chapter.  Recent  techno¬ 
logical  changes  have  increased  the  importance  of  protein  toxins  for  biological  warfare 
(BW):  (a)  progress  in  biotechnology  has  made  large-scale  production  and  purification 
feasible  for  a  larger  number  of  protein  toxins;  (b)  molecular  biology  techniques,  espe¬ 
cially  the  polymerase  chain  reaction,  have  enabled  the  identification,  isolation  and  com¬ 
parison  of  extended  families  of  previously  obscure  natural  toxins;  and  (c)  gene 
manipulation  and  microbiology  have  greatly  expanded  the  accessible  delivery  vehicles 
for  protein  toxins  to  include,  for  example,  natural  or  genetically  modified  bacteria  and 
engineered  viruses. 

Advances  in  biotechnology  notwithstanding,  if  we  consider  only  those  protein  tox¬ 
ins  with  characteristics  suitable  for  direct  use  as  mass-casualty  weapons  in  the  absence 
of  replicating,  biological  delivery  systems,  then  only  a  small  subset  of  known  proteins 
are  of  immediate  concern  (1).  The  list  of  practicable  toxin  weapons  is  small  because: 
(a)  proteins  are  not  volatile  and  generally  do  not  persist  long  in  the  environment;  (b) 
simple,  physical  protection  offers  an  effective  natural  defense  against  foreign  proteins; 
and  (c)  relatively  sophisticated  research,  development,  testing,  and  evaluation  is 
required  to  establish  conclusively  that  each  specific  protein  toxin  is  a  viable  open-air, 
aerosol  weapon. 

Although  small  in  number,  toxin  weapons  should  not  be  neglected.  Similarly  to 
chemical  weapons  or  noninfectious  biological  agents  such  as  anthrax  spores,  toxins 
offer  the  aggressor  a  tactical  weapon  to  strike  at  the  enemy  in  a  controlled  manner  that 
is  difficult  or  impossible  with  infectious  agents,  for  example  by  the  selective  contami¬ 
nation  of  key  terrain  or  high-value  targets.  Aerosolized  protein  toxins  can  be  used  both 
as  lethal  agents  and  as  severe  incapacitating  agents,  thereby  greatly  burdening  medical 
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care  and  logistical  systems.  Moreover,  unlike  chemical  nerve  agents  and  anthrax  spores, 
there  are  no  effective  postexposure  treatments  widely  available  for  the  most  dangerous 
protein  toxins. 

In  what  forms  can  we  expect  to  encounter  protein  toxin  weapons?  Most  predictions 
of  the  potential  medical  threat  posed  by  direct  delivery  of  protein  toxin  weapons  are 
predicated  on  military  doctrine  that  assumes  a  trained,  equipped,  and  healthy  popula¬ 
tion  in  control  of  its  own  food  and  water  supplies.  For  a  prepared  military  force,  the 
primary  threat  in  an  open-air  battlefield  environment  is  stable,  respirable  aerosols  of 
the  most  toxic  molecules  by  weight  (reviewed  in  ref.  1).  Closed-air  delivery  of  respi¬ 
rable  aerosols,  for  example,  within  a  building  or  other  enclosed  space,  poses  a  second¬ 
ary  threat  that  would  be  expected  to  cause  far  fewer  casualties  but  may  expand  the  set 
of  potential  toxin  weapons  to  include  those  with  lower  toxicity  or  those  lacking  out¬ 
door  stability. 

An  accurate  assessment  of  which  protein  toxins  are  effectively  “most  toxic”  by  aero¬ 
sol  delivery  must  consider  complex  biological  and  environmental  variables.  As  a  first 
approximation,  the  most  potent  toxins  (typically  bacterial  proteins)  are  those  that  are 
lethal  for  50%  of  test  animals  (i.e.,  toxin  LDS0)  at  amounts  less  than  25  ng/kg  by  intra¬ 
venous  or  intra-peritoneal  exposure  routes  (1-4).  Aerosol  lethality  is  a  function  of  both 
toxin  concentration  and  exposure  time,  and  this  is  reported  as  an  LCt50  value  with  units 
of  mg/min/m-3.1  Direct  comparison  among  published  toxin  LD50  or  LCt50  values  can 
be  easily  confounded  by  numerous  experimental  variables,  including  the  method  of 
aerosol  exposure,  time  of  exposure,  breathing  patterns,  and  other  interspecies  varia¬ 
tions  among  animal  models,  as  well  as  physical  differences  in  the  purity,  stability,  or 
potency  of  the  toxin  employed.  Furthermore,  lethality  data  alone  are  unsatisfactory  for 
gaging  the  severe  incapacitation  caused  by  lung  injury  that  may  be  enhanced  by  aero¬ 
sol  delivery  routes  for  proinflammatory  toxins. 

Some  bacterial  protein  toxins  are  notoriously  potent  food  poisons  (5).  Sabotage  of 
food  or  beverage  supplies  with  protein  toxins  is  unlikely  to  produce  mass  casualties 
against  a  military  force  but  could  have  a  significant  disruptive  effect  upon  unprepared 
populations.  Fortunately,  the  threat  of  intentional  poisoning  is  significantly  mitigated 
by  modem  food-processing  practices,  dilution,  and  routine  public  health  measures  such 
as  monitoring,  rapid  communication,  and  other  controls. 

Protein  toxins  are  not  expected  to  pose  a  significant  mass-casualty  threat  by  percuta¬ 
neous  or  ocular  delivery  routes  because  the  stratified  epithelial  tissues  of  skin  and  cor¬ 
nea  provide  barriers  that  limit  penetration  of  foreign  proteins,  provided  that  the  tissue 
has  not  been  compromised  by  injury  or  other  means.  Protein  toxins  may  cause  inca¬ 
pacitating  ocular  inflammation  by  direct  or  indirect  effects  on  exposed  cornea  and  con¬ 
junctiva,  but  these  effects  generally  are  reversible. 

From  even  a  brief  assessment  of  the  medical  threat  posed  by  protein  toxin  weapons, 
it  is  apparent  that  respiratory  protective  equipment,  for  example,  a  gas  mask  or  respira¬ 
tor,  and  immediate  decontamination  offer  the  best  defense.  However,  if  natural  or  other 
physical  barriers  and  rapid  decontamination  fail  to  prevent  internalization  of  a  protein 
toxin,  then  survival  may  depend  on  the  availability  of  adequate  medical  countermea- 


'A  detailed  discussion  of  the  pathogenesis  of  toxin  bioaersols,  including  selected  toxin  aerosol  LCt50 
values,  is  presented  elsewhere  in  this  volume  by  Pitt  and  LeClaire. 
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sures,  including  vaccines,  other  pretreatments,  or  antidotes.  The  purpose  of  this  chap¬ 
ter  is  to  provide  a  review  of  selected  medical  products  under  development  for  protec¬ 
tion  against  protein  toxins  of  military  significance  and  to  offer  a  perspective  on  the 
critical  role  of  protein  engineering2  in  the  iterative  process  of  optimizing  those  medical 
products.  In  addition  to  medical  countermeasures,  the  status  of  protein  engineering  of 
toxins  also  is  discussed. 

2.  OVERVIEW  OF  MEDICAL  COUNTERMEASURES 
2.1.  Vaccines 

Vaccination,  the  intentional  induction  of  a  lasting,  protective  immune  response  me¬ 
diated  by  antibodies,  offers  one  of  the  most  powerful,  flexible,  and  safe  methods  known 
to  achieve  medical  protection  from  protein  toxins.  Ideal  vaccines  to  protect  against  BW 
protein  toxins  would  safely  induce  lasting  levels  of  high-avidity  IgG  antibodies  within 
the  alveolar  lining  fluid,  as  well  as  IgA  antibodies  secreted  into  the  mucous  membranes 
lining  the  lung  airway,  such  that  toxins  are  neutralized  before  reaching  their  biological 
targets. 

There  is  a  general,  progressive  strategy  that  has  been  employed  for  developing  vac¬ 
cines  to  protect  against  protein  toxin  threats.  Initially,  an  inactivated  “toxoid”  vaccine 
is  prepared  from  biological  homogenates  or  crude  toxin  preparations.  Toxoid  vaccines 
provide  a  generally  safe  and  effective  solution,  as  exemplified  by  the  enduring  use  of 
tetanus  toxoid  vaccines  worldwide  (6).  Yet,  toxoid  vaccines  are  susceptible  to  produc¬ 
tion,  safety,  or  storage  limitations  that  stem  from  use  of  denaturants,  crosslinking 
agents,  residual  live  toxin,  or  from  the  partial  reversion  of  inactivated  toxoid  back  to 
active  toxin.  To  improve  on  toxoid  vaccines,  effective  “neutralizing  epitopes”  are  iden¬ 
tified  within  toxin  structures,  and  this  information  is  applied  to  develop  recombinant 
immunogens  with  enhanced  safety  and  ease  of  production. 

Protein  engineering,  especially  recombinant  DNA  technology  for  site-specific  sub¬ 
stitutions  and  commercial  protein  expression  systems,  has  contributed  to  the  develop¬ 
ment  of  a  number  of  new,  recombinant  vaccine  candidates  that  were  inaccessible 
previously  because  of  small  quantities  or  inherent  toxicity  of  natural  immunogens. 
Recombinant  immunogens  are  generally  well-defined  and  suited  to  current  Good 
Manufacturing  Practices.  However,  the  limited  immune  system  responses  to  purified, 
recombinant  proteins  or  polypeptide  subunits,  compared  to  responses  to  natural  infec¬ 
tions  or  attenuated  vaccines,  must  be  overcome  by  careful  selection  of  epitopes  and  the 
use  of  adjuvants  or  other  activators  (7). 

As  a  more-detailed  structural  concept  of  the  toxin  and  vaccine  candidate  emerges, 
protein  engineering  methods  may  permit  cycles  of  vaccine  improvement,  for  example, 
to  achieve  better  presentation  of  the  neutralizing  epitopes  or  enhanced  stability.  Engi¬ 
neering  may  result  in  production  of  new  immunogens  based  on  inactivated  holotoxins, 
polypeptide  subunits,  or  independent  polypeptide  domains. 

Because  of  the  importance  of  the  aerosol  threat  in  BW,  traditional  vaccination  strat¬ 
egies  for  some  toxins  may  benefit  from  additional  protection  of  critical  target  organs. 


2Protein  engineering  is  the  deliberate  modification  of  polypeptide  structure  to  achieve  a  desired  form  or 
function. 
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especially  the  portals  of  toxin  entry  such  as  the  respiratory  tract.  Alternate  vaccine- 
delivery  methods,  including  transdermal,  intranasal,  inhalation,  or  oral  routes  for  vac¬ 
cine  priming  or  boosting,  may  permit  more  effective  administration  of  engineered 
vaccines  to  induce  stronger  mucosal  antibody  responses.  This  approach  includes  the 
application  of  novel  devices  or  adjuvant-device  combinations  that  also  may  facilitate 
simultaneous  delivery  of  multiple  immunogens  (8).  Along  with  nontraditional  routes 
of  vaccine  delivery,  it  may  be  possible  to  enhance  protection  of  target  organs  by  the  use 
of  adjunct  therapeutics. 

Despite  the  power  of  vaccination  to  protect  against  protein  toxin  weapons,  there  will 
continue  to  be  a  limited  number  of  military  or  first  responder  scenarios  in  which  there 
is  insufficient  time  for  vaccines  to  elicit  a  protective  immune  response.  Additionally,  it 
may  be  impractical  or  undesirable  to  vaccinate  large,  healthy  populations  against  the 
relatively  remote  threat  of  all  potential  toxins.  The  vaccine  candidates  currently  avail¬ 
able  have  been  developed  for  use  in  limited,  volunteer  military  forces  comprising 
mostly  healthy  young  adults  subject  to  regular  medical  screening  and  care.  Additional 
optimization  studies  may  be  required  to  ensure  safe  administration  to  larger,  more  di¬ 
verse  civilian  populations. 

Other  limitations  may  arise  with  complete  reliance  on  vaccination  as  a  medical  solu¬ 
tion  for  toxin  weapons.  As  the  clinical  use  of  toxins  themselves  as  medical  therapies 
(so-called  “medicotoxins”)  continues  to  expand,  for  example,  the  growing  medical  use 
of  botulinum  neurotoxin  (BoNT)  injections  to  control  the  cholinergic  neuromuscular 
junction  in  various  disease  states  (reviewed  in  ref.  9),  it  will  become  increasingly  diffi¬ 
cult  to  justify  the  use  of  vaccination  against  toxin  weapons  for  the  general  population. 
Once  an  individual  is  vaccinated  against  a  toxin,  the  clinical  administration  of  that 
specific  molecule  as  a  medicotoxin  becomes  much  more  difficult  (10). 

Consequently,  the  development  of  antitoxin  therapeutics  as  adjuncts  to  vaccines  and, 
in  some  BW  scenarios,  as  viable  replacements  for  vaccination  is  an  important  compo¬ 
nent  of  medical  defense  against  protein  toxins.  Therapeutic  approaches  include  anti- 
body-based  biological  therapeutics,  as  well  as  emerging  biomedical  research  to 
discover  cost-effective  small-molecule  antidotes. 

2.2.  Immunotherapeutics 

The  use  of  antibody  molecules  before  an  anticipated  toxin  exposure,  or  as  a  therapy 
immediately  after  exposure,  is  called  “passive  immunotherapy”  or  “antitoxin”  therapy. 
Specific  antibodies  or  processed  binding  fragments  of  antibodies  (FAbs)  can  be  pre¬ 
pared  by  various  technologies,  including  vaccination  of  a  suitable  donor  with  toxin 
vaccine  candidates  or  recombinant  DNA-based  protein  expression  systems.  Purified 
immunotherapeutics  subsequently  can  be  administered  to  at-risk  or  exposed  recipients 
as  “bioscavengers”  to  bind  and  eliminate  toxic  molecules  from  the  body  before  they 
reach  critical  target  sites.  The  use  of  preformed  antibodies  to  mitigate  symptoms  of 
BoNT  toxin,  for  example,  has  been  an  accepted  part  of  the  routine  clinical  management 
of  food-borne  botulism  in  humans  since  the  1960s  (11). 

Antitoxin  antibodies  historically  have  been  captured  from  the  polyvalent  immune 
serum  of  vaccinated  or  hyperimmune  animals  and  subsequently  used  to  treat  human 
patients  exposed  to  protein  toxins.  Although  processing  to  remove  expendable  portions 
of  the  antibody  molecule  that  are  distal  to  the  essential  antigen  combining  end 
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(“despeciation”)  may  reduce  the  human  immune  reaction,  serious  side  effects  such  as 
anaphylaxis  and  serum  sickness  still  may  occur  because  the  animal-derived  products 
are  recognized  as  foreign.  Because  of  this  immunological  “rejection”  of  foreign  pro¬ 
tein  by  the  human  patient,  animal-derived  products  become  more  dangerous  if  admin¬ 
istered  repeatedly;  this  greatly  limits  the  utility  of  animal  products  as  a  pretreatment. 

Antitoxin  derived  from  human  immune  serum  of  vaccinated  volunteers  overcomes 
the  major  limitations  imposed  by  immunological  rejection  of  animal  serum.  For 
example,  human  antitoxin  products  would  be  expected  to  circulate  longer  and  could  be 
given  by  repeated  injections,  thus  opening  up  the  possibility  of  a  safe  pretreatment  for 
toxin  exposure.  However,  the  production  of  suitable  human  immune  serum  in  suffi¬ 
cient  quantities  for  use  in  mass  casualty  scenarios  may  be  impractical  because  the  num¬ 
ber  of  suitable  immune  human  donors  is  small.  Furthermore,  the  widespread  use  of 
human  immune  serum  antitoxin  carries  the  risk  of  transfer  of  unknown  or  undetectable 
human  pathogens  or  adventitious  agents  from  donor  to  recipient. 

Although  the  flexibility  and  specificity  of  an  antibody-based  therapeutic  is  unques¬ 
tionable,  the  application  of  this  approach  as  a  routine  medical  solution  in  a  field  situa¬ 
tion  poses  several  logistical  and  technical  challenges:  (a)  the  success  depends  critically 
on  stability  of  the  proper  three-dimensional  structure  of  the  antibody  therapeutic 
employed;  (b)  the  therapeutic  window  for  antibody  use  is  narrow  because  symptoms  of 
toxin  exposure  typically  appear  hours  to  days  after  exposure  when  the  toxin  already 
has  bound  its  target  or  has  been  internalized  to  intracellular  compartments  inaccessible 
to  antibody  molecules;  and  (c)  antibodies  and  FAbs  are  large  molecules  that  bind 
reversibly  with  a  limited  stoichiometry  and,  therefore,  it  generally  will  require  large 
amounts  of  therapeutic  by  weight  to  neutralize  supralethal  quantities  of  toxin. 

2.3.  Small-Molecule  Experimental  Therapeutics 

Selective,  low-molecular-weight  drugs  are  unavailable  at  present  for  the  most 
deadly  protein  toxin  weapons,  but  active  research  programs  are  underway  and  have 
produced  key  resources  in  the  past  several  years,  including  solved  three-dimen¬ 
sional  X-ray  structures  of  toxin  and  toxin-inhibitor  complexes,  cloned  toxin  sub¬ 
unit  genes,  and  specific,  high-throughput  toxin  activity  assays.  In  addition  to 
antibody-based  scavenger  approaches,  novel  toxin  therapeutics  may  be  directed 
against  one  or  more  of  the  molecular  steps  required  for  intoxication.  For  those 
protein  toxins  that  achieve  very  high  potency  by  enzymatic  catalysis,  for  example, 
it  may  be  possible  to  develop  selective,  very  high  affinity  or  irreversible  active-site 
inhibitors  as  effective  toxin  therapeutics. 

In  summary,  four  general  approaches  are  being  taken  to  develop  pharmaceuticals 
to  protect  against  protein  toxin  weapons:  toxoid  vaccines,  engineered  vaccines, 
immunotherapeutics,  and  small-molecule  therapeutics.  I  will  expand  on  the  relative 
advantages  and  disadvantages  of  each  approach  through  a  review  of  past  and  ongo¬ 
ing  research  efforts  to  protect  against  three  specific  protein  toxin  weapons:  BoNT, 
Staphylococcus  aureus  enterotoxins  (SE),  and  ricin  toxin  from  Ricinus  communis. 
BoNT,  SE,  and  ricin  are  chosen  on  the  basis  of  the  maturity  of  medical  product  can¬ 
didates  currently  under  development  and  also  because  each  represents  an  important 
class  of  protein  toxin:  cholinergic  toxins,  immune  system  modulators,  and  ribosome 
inactivating  toxins,  respectively. 
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given  by  repeated  injections,  thus  opening  up  the  possibility  of  a  safe  pretreatment  for 
toxin  exposure.  However,  the  production  of  suitable  human  immune  serum  in  suffi¬ 
cient  quantities  for  use  in  mass  casualty  scenarios  may  be  impractical  because  the  num¬ 
ber  of  suitable  immune  human  donors  is  small.  Furthermore,  the  widespread  use  of 
human  immune  serum  antitoxin  carries  the  risk  of  transfer  of  unknown  or  undetectable 
human  pathogens  or  adventitious  agents  from  donor  to  recipient. 

Although  the  flexibility  and  specificity  of  an  antibody-based  therapeutic  is  unques¬ 
tionable,  the  application  of  this  approach  as  a  routine  medical  solution  in  a  field  situa¬ 
tion  poses  several  logistical  and  technical  challenges:  (a)  the  success  depends  critically 
on  stability  of  the  proper  three-dimensional  structure  of  the  antibody  therapeutic 
employed;  (b)  the  therapeutic  window  for  antibody  use  is  narrow  because  symptoms  of 
toxin  exposure  typically  appear  hours  to  days  after  exposure  when  the  toxin  already 
has  bound  its  target  or  has  been  internalized  to  intracellular  compartments  inaccessible 
to  antibody  molecules;  and  (c)  antibodies  and  FAbs  are  large  molecules  that  bind 
reversibly  with  a  limited  stoichiometry  and,  therefore,  it  generally  will  require  large 
amounts  of  therapeutic  by  weight  to  neutralize  supralethal  quantities  of  toxin. 

2.3.  Small-Molecule  Experimental  Therapeutics 

Selective,  low-molecular-weight  drugs  are  unavailable  at  present  for  the  most 
deadly  protein  toxin  weapons,  but  active  research  programs  are  underway  and  have 
produced  key  resources  in  the  past  several  years,  including  solved  three-dimen¬ 
sional  X-ray  structures  of  toxin  and  toxin-inhibitor  complexes,  cloned  toxin  sub¬ 
unit  genes,  and  specific,  high-throughput  toxin  activity  assays.  In  addition  to 
antibody-based  scavenger  approaches,  novel  toxin  therapeutics  may  be  directed 
against  one  or  more  of  the  molecular  steps  required  for  intoxication.  For  those 
protein  toxins  that  achieve  very  high  potency  by  enzymatic  catalysis,  for  example, 
it  may  be  possible  to  develop  selective,  very  high  affinity  or  irreversible  active-site 
inhibitors  as  effective  toxin  therapeutics. 

In  summary,  four  general  approaches  are  being  taken  to  develop  pharmaceuticals 
to  protect  against  protein  toxin  weapons:  toxoid  vaccines,  engineered  vaccines, 
immunotherapeutics,  and  small-molecule  therapeutics.  I  will  expand  on  the  relative 
advantages  and  disadvantages  of  each  approach  through  a  review  of  past  and  ongo¬ 
ing  research  efforts  to  protect  against  three  specific  protein  toxin  weapons:  BoNT, 
Staphylococcus  aureus  enterotoxins  (SE),  and  ricin  toxin  from  Ricinus  communis. 
BoNT,  SE,  and  ricin  are  chosen  on  the  basis  of  the  maturity  of  medical  product  can¬ 
didates  currently  under  development  and  also  because  each  represents  an  important 
class  of  protein  toxin:  cholinergic  toxins,  immune  system  modulators,  and  ribosome 
inactivating  toxins,  respectively. 
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3.  BoNT 

Botulism  is  caused  by  a  family  of  potent  neurotoxins  (BoNT)  that  are  produced  for 
unknown  reasons  by  Clostridium  botulinum  bacteria  from  one  of  at  least  seven  differ¬ 
ent  serotypes  (designated  BoNT  types  /A  through  /G)  (12).  Four  of  the  serotypes  (/A, 
/B,  /E,  and,  less  commonly,  /F)  are  significant  for  human  poisoning  through  contami¬ 
nated  food,  wound  infection,  or  infant  botulism  (reviewed  in  ref.  13).  Although  botu¬ 
lism  is  a  relatively  rare  disease  worldwide,  the  extreme  toxicity  of  BoNT  makes  it  a 
potential  toxin  weapon  (11,14). 

Within  the  past  few  years,  three-dimensional  structures  of  holotoxins  or  isolated 
domains  of  toxins  from  Clostridium  bacteria  have  been  solved,  and  consequently,  a 
more  complete  picture  of  toxin  function  is  emerging  (15-18).  Like  the  closely  related 
tetanus  neurotoxin  (TeNT),  the  BoNT  proteins  are  disulfide-bonded  heterodimers  com¬ 
posed  of  an  approx  50  kD  zinc  metalloprotease  “light  chain”  and  an  approx  100  kD 
receptor-binding  “heavy  chain”  (He).  The  He  has  been  subdivided  structurally  and 
functionally  into  a  C-terminal  domain  that  binds  the  toxin  to  gangliosides  and  other 
receptors  on  the  surface  of  peripheral  cholinergic  neurons  (so-called  He  domain),  and 
an  N-terminal  domain  that  is  believed  to  enhance  cell  binding  and  translocation  of  the 
catalytic  light  chain  across  the  vesicular  membrane  (reviewed  in  ref.  19;  see  Fig.  1). 
Additionally,  BoNT  naturally  is  associated  with  numerous  nontoxic  “accessory  pro¬ 
teins,”  some  of  which  may  stabilize  the  toxins  in  vivo  (20). 

The  mechanism  by  which  BoNT  traverses  neuron  cell  membranes  is  incompletely 
understood,  but  it  may  involve  a  large  conformational  change  in  the  toxin.  A  confor¬ 
mational  change  or  partial  unfolding  of  the  light  chain  has  been  proposed  to  explain 
passage  of  the  toxin  catalytic  portion  through  narrow  transmembrane  channels  or  pores 
formed  by  the  amino  terminal  portion  of  the  BoNT  heavy  chain  (21-24). 

Once  inside  the  neuron,  the  catalytic  subunit  of  BoNT  acts  as  a  selective,  zinc 
metalloprotease  to  cleave  essential  polypeptide  components  of  the  so-called  “SNARE 
complex”  required  for  normal  neurotransmitter  release  or  membrane  fusion.  BoNT/A, 
/Cl,  and  /E  cleave  the  polypeptide  SNAP-25  (BoNT/Cl  cleaves  syntaxin),  and  BoNT/ 
B,  /D,  /F,  and  /G  cleave  synaptobrevin  (reviewed  in  ref.  19).  The  exact  mechanisms  by 
which  the  soluble  A-ethyl  maleimide-sensitive  factor  attachment  protein  receptors 
(SNARE)  complex  mediates  vesicle  fusion  or  release  of  neurotransmitter  acetylcho¬ 
line  (ACh)  into  the  synaptic  cleft  remain  controversial,  but  it  is  clear  that  the  integrity 
of  the  complex  is  critical  for  normal  cholinergic  nerve  transmission  (reviewed  in  refs. 
25-27). 

By  disrupting  ACh  exocytosis  at  the  peripheral  neuromuscular  junction,  BoNT 
causes  cholinergic  autonomic  nervous  system  dysfunction  in  effected  patients.  Signs 
and  symptoms  of  BoNT  intoxication  typically  manifest  12-36  h  after  toxin  exposure 
and  include  generalized  weakness,  lassitude,  and  dizziness.  There  may  be  decreased 
salivation  and  dry  mouth  or  sore  throat;  motor  symptoms  reflect  cranial  nerve  dysfunc¬ 
tion,  including  dysarthria,  dysphonia,  and  dysphagia,  followed  by  symmetrical  de¬ 
scending  and  progressive  muscle  paralysis  (13).  Without  adequate  supportive  care, 
death  may  occur  abruptly  as  a  result  of  respiratory  failure.  The  molecular  precision  of 
BoNT  renders  it  among  the  most  toxic  substances  known  by  weight;  internalized  BoNT 
may  cause  fatal  paralysis  in  animals  at  nanogram/kilogram  levels  (3). 
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3.1.  BoNT  Toxoid  Vaccines 

Preparations  of  inactivated,  partially  purified  BoNT  have  been  used  as  vaccines  to 
protect  humans  for  many  years  (28).  BoNT  from  each  of  the  serotypes  /A-/E  was  pre¬ 
pared,  inactivated  with  formalin,  adsorbed  to  aluminum  hydroxide,  and  blended  to  pro¬ 
duce  an  effective  pentavalent  toxoid  vaccine  (PBT)  (29-33).  The  PBT  vaccine  currently 
is  administered  to  at-risk  laboratory  workers  under  an  Investigational  New  Drug  (IND) 
protocol.  An  effective  vaccination  regimen  has  been  found  to  comprise  initial  doses 
(0.5  mL)  of  10  pg  of  toxin  protein  equivalent  given  at  0,  2,  and  12  wk,  followed  by 
annual  boosters.  Annual  boosters  have  been  offered  contingent  on  serum-neutralizing 
BoNT  antibody  levels,  as  measured  by  mouse  neutralization  assays.  In  human  volun¬ 
teers,  the  available  PBT  induces  antibodies  that  neutralize  the  toxicity  of  BoNT/A  and 
/B  in  mouse  bioassays  (34).  Protective  titers  for  other  serotypes  have  not  been  estab¬ 
lished  as  rigorously  as  for  BoNT/A,  but  neither  have  the  exposure  threshold  levels  of 
toxin  for  which  a  laboratory  worker  may  be  at  risk. 

Additional  BoNT  toxoid  vaccines  have  been  produced  and  used  safely  in  humans. 
The  PHLS  Center  for  Applied  Microbiology  and  Research,  Porton  Down  (Salisbury, 
Wiltshire,  England)  produced  a  monovalent  BoNT/A  vaccine.  A  monovalent  toxoid 
vaccine  for  BoNT/F  subsequently  was  developed  after  BoNT/F  botulism  outbreaks 
were  diagnosed  in  1980-1990  (35).  A  tetravalent  vaccine  candidate  (BoNT/A,  /B,  /E, 
and  /F)  has  recently  been  produced  for  human  use  (36). 

Despite  the  effectiveness  of  BoNT  toxoid  vaccines,  there  are  significant  cost  and 
technical  barriers  associated  with  their  production.  Because  of  the  sporulating  nature 
of  C.  botulinum,  a  dedicated,  contained  manufacturing  facility  currently  is  required  to 
produce  toxoid.  Additionally,  the  natural  yields  of  BoNT  from  C.  botulinum  are  low 
relative  to  the  quantities  of  toxin  needed  for  vaccine  starting  material.  Moreover,  there 
is  a  small  but  significant  number  of  minor  adverse  reactions  associated  with  toxoid 
vaccine,  perhaps  because  of  the  use  of  formalin  in  the  manufacturing  process  (reviewed 
in  ref.  37).  These  concerns  have  led  to  the  development  of  recombinant  BoNT  vaccines 
(38-40). 

3.2.  Engineered  BoNT  Vaccines 

Simpson  et  al.  reported  that  TeNT  He  fragments  could  compete  for  neuron  binding 
and,  thereby,  antagonize  the  neuromuscular  blocking  properties  of  native  TeNT  and,  to 
a  lesser  extent,  BoNT  (41,42).  This  observation  led  to  the  immunization  of  mice  against 
TeNT  with  fragments  of  TeNT  synthesized  in  E.  coli  (38,43).  A  similar  vaccine  for 
BoNT/A  based  on  the  recombinant  He  became  possible  once  the  toxin  gene  was  cloned 
and  expressed  (39,40,44)  ( see  Fig.  1).  Subsequent  epitope  mapping  of  BoNT/A  identi¬ 
fied  two  specific  polypeptides,  both  from  He  (H455_661  and  Hj  150-1289)'  that  were  capable 
of  protecting  mice  from  a  supralethal  challenge  with  the  toxin  (45). 

The  US  Army  Medical  Research  Institute  of  Infectious  Diseases  (USAMRIID) 
developed  recombinant  BoNT  He  vaccine  candidates  for  BoNT/A,  /B,  and  /F  that  con¬ 
fer  protection  in  mice  against  supralethal  challenges  with  toxin  (46-50).  This  approach 
recently  was  extended  to  include  BoNT  He  fragments  from  BoNT/C  and  /D  (57). 
Unlike  the  BoNT  toxoids,  the  recombinant  He  vaccine  candidates  do  not  require  treat¬ 
ment  with  denaturants  and  are  not  susceptible  to  reversion  of  catalytic  activity.  If  no 
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Fig.  1.  Topology  of  recombinant  BoNT  He  vaccine  candidates  with  respect  to  the  overall 
three-dimensional  structure  of  the  holotoxin.  The  figure  shows  a  ribbon  diagram  of  the  BoNT/ 
A  holotoxin  structure  solved  by  X-ray  crystallography  (PDB  entry  3BTA)  that  includes  the 
three  functional  domains  colored  separately.  A  hypothetical  projection  of  the  recombinant  vac¬ 
cine  candidate  structure  based  upon  the  known  amino  acid  sequence  is  shown  as  inset. 


serious  safety  issues  are  identified,  then  the  BoNT  He  vaccine  candidates  will  require 
final  formulation  with  an  appropriate  adjuvant,  and  optimization  of  the  stability  of 
each  vaccine  during  scale-up  production  and  formulation  (3750,52).  Additionally,  a 
strategy  for  effective  delivery  of  multiple  recombinant  BoNT  He  subunit  immunogens 
is  needed  to  ensure  protection  against  all  relevant  BoNT  serotypes. 

Although  apparently  safe  and  effective  as  vaccine  candidates,  an  inherent  limitation 
of  the  recombinant  He  fragment  vaccines  is  their  lack  of  cross-reactivity  among  BoNT 
serotypes.  A  separate  He  fragment  immunogen  is  required  for  each  BoNT  serotype 
and,  perhaps,  for  some  different  strains  of  each  BoNT  serotypes.  Future  protein  engi¬ 
neering  studies  may  employ  detailed  structural  comparisons  of  essential  residues  within 
the  He  binding  sites  among  the  relevant  BoNT  serotypes  to  identify  conserved  epitopes 
(53).  The  solved  X-ray  crystal  structures  of  receptor-binding  domains  from  TeNT  and 
multiple  BoNT  serotypes,  both  free  and  bound  with  receptor  analogs,  should  facilitate 
this  approach  by  identifying  critical,  conserved  binding  features  among  serotypes 
(1854).  Additional  work  is  needed  to  explore  the  possibility  of  developing  new  vac¬ 
cine  candidates  based  on  cross-reactive  neutralizing  epitopes  within  the  translocation 
and  catalytic  domains  of  different  BoNT  serotypes  (55). 
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Fig.  2.  Venn  diagram  depicting  several  complementary,  mechanism-based  research 
approaches  being  undertaken  to  develop  novel  therapeutics  for  protection  against  BoNT.  Cur¬ 
rent  therapeutics  efforts  include  three  primary  research  areas:  (a)  pretreatments;  (b) 
postexposure  antidotes;  and  (c)  cholinergic  neuron  drug  delivery  systems  for  delivery  thera¬ 
peutics  as  appropriate. 


3.3.  Alternate  Delivery  of  BoNT  Vaccines 

Several  alternate  vaccine-delivery  routes  for  recombinant  BoNT  He  immunogens 
have  been  explored  recently  in  animal  models  including  inhalation  and  oral  vaccine 
delivery,  as  well  as  the  use  of  self-replicating  RNA  virus  or  DNA-based  vectors  (56— 
59).  Proof-of-concept  for  the  use  of  inactivated  holotoxin  as  an  oral  immungen  was 
reported  by  Simpson  et  al.  (<50,67;.  However,  it  remains  unproven  whether  these 
experimental  delivery  approaches  offer  any  practical  advantage  for  BW  defense  against 
BoNT  compared  with  traditional,  intramuscular  vaccination.  More  data  are  needed 
describing  the  kinetics  and  biodistribution  of  BoNT  after  aerosol  exposure  in  primates 
to  evaluate  whether  there  is  a  role  for  boosting  mucosal  immunity  in  protecting  against 
supralethal  BoNT  exposures. 

Protein  engineering  also  may  permit  a  combination  of  the  toxoid  and  recombinant  vac¬ 
cine  approaches.  It  has  been  shown  that  expression  levels  of  BoNT  can  be  increased  in  an  E. 
coli  system  by  amplifying  specific  transfer  RNA  (tRNA)  genes  for  rare  codons  (62).  Addi¬ 
tionally,  progress  also  has  been  made  on  bacterial  expression  systems  based  on  non-toxi- 
genic  strains  of  C.  botulinum  (63).  These  results  suggest  the  possibility  that  superior  BoNT 
toxoid  vaccines  might  be  produced  in  E.  coli  or  other  protein  expression  systems  by  intro¬ 
ducing  active-site  substitutions  to  selectively  inactivate  holotoxin,  without  the  need  for 
costly,  dedicated  production  facilities  or  the  risk  of  toxin  reversion  that  limits  older  toxoid 
technology.  Similarly,  these  tools  may  facilitate  the  future  design  of  stable,  multivalent, 
BoNT  vaccines  based  on  recombinant  chimeras  of  multiple  serotypes. 
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Rg.  3.  Position  of  the  three  inactivating  substitutions  used  to  produce  the  current  recombi 
SE  vaccine  candidate  with  reaped  the  overall  toxin  s , mature  and  HLA 
The  figure  shows  a  nbbon  diagram  of  the  SE/A  triple  substitution  structure  solved  bv  X  rav 
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tArg/u,  Arg4s,  and  Ala92)  are  displayed  with  VDW  surfaces. 


3.4.  Immunotherapeutics 

Current  medical  treatment  for  BoNT  intoxication  is  likely  to  involve  prolonged  life- 

Z%  f°X3Clttatf  rr  mcluding  the  continual  use  Of  mechanical  ventila- 
tton  (11)  The  potential  of  BoNT  as  a  mass  casualty  weapon,  combined  with  the  high 

cost  and  logistical  burden  of  symptomatic  medical  treatment,  has  led  to  increased 
emphasis  on  the  development  of  selective  and  cost-effective  BoNT  therapeutics.  Some 

am  summarized  in  '***  eXP'°red  *”  ‘hiS  gr°Wi"S  “h 

Anima1  and  human  studies  suggest  that  the  presence  of  preformed,  neutralizing 
antibodies  in  the  serum  to  bind  and  eliminate  toxin  before  it  reaches  target  cells  can 
prevent  or  reduce  BoNT  intoxication.  Several  different  antitoxin  products  for  human 
use  to  protect  against  BoNT  have  been  developed.  A  “trivalent”  (serotypes  /A  /B  and 
/E)  equine  antitoxin  product,  as  well  as  a  monovalent  BoNT/E  antitoxin,  are  licensed 

nitl  n  Tc  Canada  (formerly  Connaught  Laboratories,  Ltd.)  and  approved  for 
in  e  ni  States.  Biomed  of  Warsaw,  Poland  also  produces  a  trivalent  BoNT/A/ 

fvfesM1  "/Pt  n'  ^ddtm0na!ly’  “  e^Perimental,  despeciated  equine  heptavalent  (sero- 

r^Astr.svutped  at  usAMRno  and — is 

^Several  efforts  have  been  undertaken  to  produce  a  human  antibody-based  therapeu- 

n  io«T  reCOgnitlon  ofMant  holism  in  the  late  1970s  (11). 

1981  1982,  the  US  Army,  the  California  Department  of  Health  Services,  and  the 
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Fig.  4.  Topology  of  recombinant  ricin  vaccine  candidates  with  respect  to  the  overall  three- 
dimensional  structure  of  the  holotoxin.  The  figure  shows  a  ribbon  diagram  of  the  ricin  holotoxin 
structure  solved  by  X-ray  crystallography  (PDB  entry  2AAI).  The  holotoxin  includes  two  sub¬ 
units  RTA  (light  gray),  and  RTB  (dark  gray).  The  hypothetical  structure  of  the  domain  (RTA  1  - 
198)  used  for  recombinant  vaccine  candidates  is  projected  from  the  toxin  structure  based  on  the 
known  amino  acid  sequence. 


University  of  Minnesota  collaborated  to  produce  a  human  botulism  immune  globulin 
(BIG)  antiserum  from  different  pools  of  plasma  obtained  from  human  donors  who  had 
been  vaccinated  previously  with  the  PBT  vaccine.  Subsequently,  a  human  antitoxin 
(BIG-IV)  was  developed  and  distributed  for  treating  infant  botulism  under  a  Unite 
States  Food  and  Drug  Administration  (FDA)-authorized  IND  protocol  (11) L  Intrave¬ 
nous  administration  of  BIG  significantly  reduces  the  hospital  stay  of  infants  diagnosed 
with  botulism,  but  it  is  not  clear  to  what  extent  the  success  of  BIG  with  infant  botulism 
will  also  apply  to  treating  patients  exposed  to  BoNT  by  aerosol.  Moreover,  because  o 
the  obvious  logistical  barriers  in  production  of  antiserum  in  humans,  the  available  BIG 
supplies  are  not  expected  to  meet  the  mass  casualty  demands  of  a  BW  attack. 

There  are  several  ongoing  biotechnological  approaches  aimed  at  expanding  the  aval  - 
ability  of  anti-toxins  for  human  use.  It  is  beyond  the  scope  of  this  chapter  to  review  all 
promising  technologies  underway,  but  we  offer  two  examples  currently  being  exP,ored- 
the  design  and  production  of  human  recombinant  monoclonal  antibodies  (MAbs)  and 
the  production  of  transgenic  animals  capable  of  producing  human  antibodies. 

Preliminary  studies  showed  that  MAbs  produced  in  rodents  could  neutralize  large 
amounts  of  BoNT  toxin,  at  least  10-100  times  the  BoNT  toxin  LD50  doses  (45,64). 
Subsequent  work  by  Marks  et  al.  generated  phage  antibody  libraries  from  mice  vacci¬ 
nated  with  the  He  neutralizing  epitope  identified  in  earlier  studies  or  from  human  vol¬ 
unteers  previously  vaccinated  with  PBT  (65,66).  The  technology  permits  recombinant 
expression  of  human  antibodies  for  potential  use  as  therapeutics.  Rapidly  evaluating  a 
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relatively  large  number  of  unique  MAbs  from  these  libraries  has  opened  up  the  possi¬ 
bility  of  achieving  a  multiplicative  increase  in  toxin  neutralization  by  combining  high- 
affinity  antibodies  with  nonoverlapping  binding  sites.  Using  this  approach  under 
optimal  conditions,  it  has  been  possible  to  neutralize  very  large  amounts  of  BoNT/A, 
thereby  providing  protection  in  animal  models  against  greater  than  10,000-100,000 
times  the  toxin  LD50  doses  (67).  The  medical  product  expected  from  this  research  will 
be  well-defined  “oligoclonal”  mixtures  of  selected  human  MAbs  specific  for  toxin 
serotypes. 

An  alternative  approach  to  achieve  large-scale  production  of  high-affinity  therapeu¬ 
tic  antibodies  for  BoNT  or  other  toxins  is  the  use  of  human  artificial  chromosome 
vectors  to  introduce  the  entire,  unrearranged  sequences  for  human  Ig  light-  and  heavy- 
chain  genes  into  livestock.  Kuroiwa  et  al.  demonstrated  that  a  human  artificial  chromo¬ 
some  vector  can  be  inserted  into  bovine  fetal  fibroblast  cells,  thereby  allowing  for  the 
production  of  cloned  cattle  carrying  the  human  antibody  genes  (68).  Such  animals  could 
be  used  to  produce  large  quantities  of  human  polyclonal  antisera  against  BoNT  or  other 
toxins  without  the  side  effects  and  logistical  burden  inherent  in  the  past  clinical  use  of 
despeciated  antisera. 

3.5.  Small-Molecule  Experimental  Therapeutics 

There  currently  is  no  safe  and  effective  small-molecule  therapeutic  for  preventing  or 
reversing  BoNT  intoxication.  During  the  past  several  years,  however,  a  more-detailed 
understanding  of  the  complex  steps  involved  in  BoNT  intoxication,  including  neuron 
binding,  translocation,  and  catalysis,  has  opened  up  the  possibility  for  rational  devel¬ 
opment  of  therapeutic  intervention  at  the  molecular  level. 

Ongoing  research  has  focused  on  BoNT  active-site  inhibitors,  including  peptide- 
based  captopril  derivatives  and  other  classes  of  zinc  metalloprotease  inhibitors  (69- 
72).  Most  of  the  inhibitors  reported  to  date  are  either  nonselective  or  bind  with  affinity 
that  is  too  low  to  be  useful  as  a  therapeutic.  Iterative  inhibitor  design  is  improving  the 
situation  and  recently  a  (3-amino  thiol  inhibitor  of  BoNT  B  was  reported  with  a  Ki  of  20 
n M  <73>74)-  Technical  challenges  to  this  approach  include  the  use  of  peptide  deriva¬ 
tives  as  drugs,  the  difficulty  in  delivering  drugs  within  the  nervous  system,  and  the 
likely  need  to  develop  specific  inhibitors  for  each  serotype  of  BoNT. 

With  the  goal  of  arriving  at  therapeutics  that  will  antagonize  multiple  serotypes  of 
BoNT,  small  molecules  that  act  indirectly  to  overcome  the  presynaptic  blockade  of 
neurotransmitter  release  also  have  been  explored.  Toosendanin,  a  triterpenoid  deriva¬ 
tive  from  the  bark  oiMelia  toosendan,  has  limited  efficacy  in  antagonizing  the  effects 
of  BoNT  intoxication  in  cell-based  systems,  as  well  as  in  a  preliminary  nonhuman 
primate  study  (75-77).  The  mechanism  of  action  for  Toosendanin  remains  unclear, 
although  it  appears  to  act  as  a  complex  presynaptic  blocking  agent  that  can  alter  the 
quantal  release  of  ACh  by  modulating  calcium  channel  activity  (78,79).  However,  tox¬ 
icity  is  expected  to  limit  its  usefulness  as  a  drug  because  Toosendanin  itself  blocks 

presynaptic  ACh  release  under  conditions  close  to  those  found  to  show  efficacy  against 
BoNT. 

The  potassium  channel  blocker,  3,4-diaminopyridine  (3,4-DAP)  also  can  antago¬ 
nize  the  effects  of  BoNT  in  vivo,  provided  that  the  drug  concentration  is  maintained  at 
plasma  concentrations  of  about  30  \\.M  during  the  entire  clinical  course  of  intoxication 
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(80  81).  The  results  were  comparable  when  3,4-DAP  was  given  1,  2,  3,  or  7  d  after 
BoNT/A  intoxication,  but  the  compound  was  also  essentially  ineffective  in  antagoniz¬ 
ing  the  paralytic  actions  of  BoNT/B  or  BoNT/F.  As  with  Toosendanm  one  expects  that 
the  general  toxicity  of  3,4-DAP,  coupled  with  the  requirement  of  prolonged  drug 
administration  at  relatively  high  levels,  preclude  routine  therapeutic  use. 

Other  experimental  approaches  being  explored  as  future  BoNT  therapeutics  include 
receptor  antagonists  as  pretreatments  that  selectively  block  toxin  receptor  binding,  as 
well  as  therapies  that  reverse  intoxication  *by  replacing  target  molecules  destroyed  by 
the  toxin.  An  example  of  the  latter  is  the  replacement  of  SNARE  proteins  by  gene 
therapy  to  rescue  BoNT-intoxicated  neurons  (82). 

4.  STAPHYLOCOCCUS  AUREUS  ENTEROTOXINS 

Whereas  BoNT  achieves  its  potency  by  dampening  an  amplified  extracellular  sig¬ 
nal  of  nerve  cells  via  enzymatic  catalysis,  the  S.  aureus  enterotoxins  (SE)  operate  by 
inappropriately  amplifying  an  extracellular  signal  of  key  immune  cells.  The  SE  belong 
to  an  extended  family  of  stable  23-29  kD  protein  toxins  that  includes  SE  serotypes  /A, 
/B  /Cn  /D  /E,  and  /H,  and  streptococcal  pyrogenic  exotoxms  serotypes  /A-/C,  /1--/H, 
and  /J,  ’as  well  as  toxic  shock  syndrome  toxin  (TSST-1)  (83).  Based  on  their  common 
ability  to  cause  severe  illness  in  animals  by  inducing  a  physiological  overreaction  of 
the  host-immune  response,  these  toxins  have  been  categorized  collectively  as 
“superantigens”  (SAgs);  they  are  a  major  cause  of  human  food  poisoning  and  a  so 
contribute  significantly  to  opportunistic  bacterial  infections  in  hospital  patients  (re¬ 
viewed  in  refs.  84-88).  „  ,ccm,  CC/r>  :c  « 

The  most  important  SAg  in  the  context  of  BW  is  SE  serotype  /B  (SE/B)  .SE/B  is  a 

two-domain,  cc-p-protein  that  contains  discrete  binding  sites  for  the  major  histocom¬ 
patibility  complex  (MHC)  class  II  molecule  and  the  Vp  regions  of  T-cell  antigen  re¬ 
ceptors  (TCRs)  (89-91 ).  By  binding  to  these  two  receptor  molecules,  and  perhaps 
through  other  cell-surface  interactions,  SE/B  is  able  to  activate  both  antigen-presenting 
cells  and  a  relatively  large  number  of  T  lymphocytes  to  cause  release  of  pyrogenic 
cytokines,  chemokines,  and  other  proinflammatory  molecules  (reviewed  in  ref.  92). 

The  more  common  forms  of  SAg  food  poisoning  can  be  managed  with  routine  sup¬ 
portive  care,  but  SE/B  poses  a  formidable  aerosol  threat  because  of  its  high  potency 
and  stability.  It  is  estimated  that  SE/B  can  produce  human  incapacitation  and  death  at 
levels  as  low  as  0.03  and  1.5  \ig,  respectively,  by  the  aerosol  route  of  exposure.  Pri¬ 
mates  are  more  sensitive  than  are  many  other  animal  species,  perhaps  partly  because  of 
higher  affinity  of  the  primate  MHC  class  II  receptors  for  SE/B.  In  a  rhesus  monkey 
model,  exposure  to  lethal  amounts  of  SE/B  caused  disabling  emesis  followed  by  a 
rapid  drop  in  blood  pressure,  elevated  temperature,  skin  rashes,  toxic  shock,  multiple 
organ  failure,  and  death  (reviewed  in  ref.  93). 

4.1.  SE  Toxoid  Vaccines 

Almost  40  yr  ago,  it  was  shown  that  SE/B  can  be  isolated  from  bacterial  culture 
supernatants  in  highly  purified  form,  and  inactivated  with  neutral  formaldehyde  solu- 

3These  values  are  estimates  for  a  70-kg  human  based  upon  extrapolation  of  limited  laboratory  reports  of 
accidental  intoxication;  the  aerosol  LD50  in  primates  is  20-30  pg/kg- 
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tions  to  produce  an  effective  toxoid  vaccine  (94).  Anecdotal  safety  problems  were 
reported  during  early  animal  studies  of  an  SE/B  toxoid  vaccine,  perhaps  because  there 
was  not  a  standard  methodology  for  making  the  toxoid  (95-97).  Warren  et  al.  system¬ 
atically  characterized  different  conditions  of  pH  and  formaldehyde  concentration  and 
suggested  that  conditions  for  crosslinking  the  toxin  were  critical  for  obtaining  repro¬ 
ducible  and  immunogenic  vaccine  candidates;  from  these  studies,  an  effective  SE/B 
toxoid  vaccine  was  later  produced  by  incubating  toxin  with  1%  formaldehyde  at  37°C 
for  30  d  at  pH  7.5  (98,99). 

The  SE/B  toxoid  combined  with  a  suitable  adjuvant  or  enhancer  protected  monkeys 
from  an  SE/B  aerosol  challenge  of  greater  than  10  LD50  (100-102).  Complexes  of  the 
SE/B  toxoid  with  selected  components  of  the  meningococcal  outer  membrane  (so- 
called  “SE/B  toxoid  proteosomes”),  for  example,  induced  protective  immunity  intrana- 
sally  or  intramuscularly,  and  protected  100%  of  monkeys  challenged  with  SE/B  aerosol 
(102,103).  Nevertheless,  the  requirement  of  active  toxin  production  as  starting  mate¬ 
rial,  the  possibility  of  toxoid  reversion  to  yield  active  SE/B  toxin,  as  well  as  minor 
reactogenicity  associated  with  formaldehyde-inactivated  vaccines,  has  prompted  research 
to  develop  improved  SE/B  vaccines. 

4.2.  Engineered  SE  Vaccines 

Comparative  structural  and  biochemical  studies  carried  out  during  the  1990s  focused 
on  the  development  of  nontoxic,  recombinant  immunogens  capable  of  eliciting  a  pro¬ 
tective  immune  response  against  multiple  SAg  toxins  (83,104).  Ulrich  et  al.  at 
USAMRIID  attempted  to  inactivate  SE  by  modifying  three  structural  regions  of  the 
toxin  that  are  involved  in  HLA-DR1  binding:  a  polar  pocket  created  by  three  (3-strand 
elements  of  the  (3-barrel  domain  of  the  toxin,  a  hydrophobic  reverse  turn,  and  a  disul¬ 
fide-bonded  loop  (104). 

The  polar  binding  pocket  binding  region  in  SE/B  comprises  three  key  residues  of  the 
toxin,  Glu67,  Tyr89,  and  Tyrll5,  that  are  postulated  to  form  favorable  interactions 
with  Lys39  of  the  HLA-DR1  a-subunit  by  ion-pairing  and  hydrogen  bonding 
(90,105,106).  Removing  the  anion  at  Glu67  (Glu->Gln  substitution)  resulted  in  an 
approx  100-fold  reduction  in  binding  affinity;  substituting  either  Tyr89  orTyrl  15  with 
Ala  also  reduced  binding  by  100-fold  (104,105). 

A  second  critical  binding  region  between  SE/B  and  the  HLA-DR  molecule  involves 
a  hydrophobic  reverse  turn  region  comprising  amino  acid  residues  44-47  that  connects 
(3-strands  1  and  2  of  SE/B  (105,107).  The  backbone  atoms  of  these  residues  are  posi¬ 
tioned  to  participate  in  attractive  electrostatic  interactions  with  the  HLA-DR  1  a- 
subunit;  there  also  appears  to  be  favorable  hydrophobic  packing  between  the  toxin 
and  the  receptor  mediated  by  SE/B  Leu45. 

Replacing  Leu45  with  a  large,  polar  residue  (Leu— »Arg  substitution)  reduced  bind¬ 
ing  of  the  toxin  to  HLA-DR  1  to  below  detectable  limits  (105).  The  Leu45Arg  substitu¬ 
tion  may  alter  the  volume  and  polarity  of  this  small  hydrophobic  pocket  of  SE/B 
sufficiently  to  disrupt  its  binding  with  HLA-DR1.  Vaccinating  mice  with  Leu45Arg  or 
with  site-specific  mutants  designed  to  disrupt  backbone  contacts  within  the  reverse 
turn  region  (Gln43Pro  and  Phe44Pro),  protected  against  a  supralethal  (approx  30  times 
LD50)  challenge  with  SE/B;  the  Leu45Arg  mutant  also  induced  a  greater  IgG2a  and 
IgG2b  immune  response  in  vaccinated  mice  than  did  either  of  the  Pro  mutants  (108). 
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Finally,  a  disulfide  bonded  loop  region  of  the  SE/B  structure  was  implicated  in 
receptor  binding  by  analogy  with  TSST  results,  and  substitution  within  this  region 
(Tyr94— >Ala)  reduced  binding  of  SE/B  with  HLA-DR1  (1 04). 

By  combining  substitutions  in  each  of  these  three  structural  regions  of  SE/B 
(Tyr89Ala,  Leu45Arg,  and  Tyr94Ala)  within  a  single  immunogen,  a  recombinant  vac¬ 
cine  candidate  (rSE/Bv)  was  produced  that  lacks  detectable  SAg  activity.  An  analo¬ 
gous  recombinant  immunogen  subsequently  was  developed  for  SE  type  A  (SE/A)  by 
introducing  comparable  substitutions:  Asp70Arg,  Leu48Arg,  and  Tyr92Ala.  Figure  3 
depicts  the  relative  positions  of  the  altered  side  chains  within  the  solved,  three-dimen¬ 
sional  X-ray  crystal  structure  of  the  SE/A  immunogen  ( 109). 

The  rSE/Bv  was  tested  in  rodent4  and  nonhuman  primate  model  systems  for  safety 
and  efficacy.  The  vaccine  elicited  high  antibody  titers,  and  vaccinated  mice  survived 
supralethal  challenges  with  SE/B  toxin.  When  administered  at  a  20-pig  dose,  three-dose 
schedule,  using  alum  as  adjuvant,  rSE/Bv  protected  nonhuman  primates  against  greater 
than  20  LD50  of  SE/B  toxin.  Moreover,  in  contrast  with  natural  toxin,  rSE/Bv  showed 
no  evidence  of  toxic  SAg  activity.  In  ex  vivo  assays  conducted  with  human  immune 
cells,  rSE/Bv  did  not  bind  human  MHC  class  II  receptors;  did  not  stimulate  cytokine 
release;  and  did  not  elicit  nonspecific  T-cell  cell  mitosis.  A  suitable  process  has  been 
developed  to  produce  rSE/Bv  in  a  high-level  E.  coli  expression  system  under  condi¬ 
tions  compatible  with  current  Good  Manufacturing  Practices  (111). 

Additional  structural  and  mutation  studies  have  been  undertaken  to  produce  analo¬ 
gous  vaccine  candidates  for  protection  against  other  SAgs  (83,105,112-1 14).  Sugges¬ 
tive  evidence  has  been  presented  that  vaccination  with  SE/B  and  SE/A  vaccine 
candidates  may  offer  some  protection  against  other  SE  toxin  serotypes,  raising  the  pos¬ 
sibility  of  a  single  vaccine  that  can  offer  protection  against  multiple  SAgs. 

4.3.  Experimental  Therapeutics 

There  is  no  approved  therapeutic  for  reversing  the  effects  of  SE  intoxication;  treat¬ 
ment  is  aimed  at  reducing  the  incapacitating  symptoms,  maintaining  adequate  hydra¬ 
tion,  and  preventing  or  managing  the  clinical  sequelae  of  systemic  shock. 

Several  experimental  approaches  are  underway  to  evaluate  potential  therapeutic 
approaches  to  SE.  These  include  suppressing  abnormal  T-cell  activation  by  preventing 
or  disrupting  abnormal  TCR-MHC  interactions;  mitigating  downstream  cytokine  or 
chemokine  release  caused  by  activated  lymphocytes  and  macrophages  after  SAg  expo¬ 
sure;  and  blocking  the  costimulatory  molecules  involved  in  activation  or  other  effector 
functions  of  T  cells  (115-117). 


4Unlike  the  MHC  receptors  of  humans  and  other  primates,  the  a-chain  of  mouse  MHC  class  II  lacks  key 
amino  acid  residues  involved  in  high  affinity  toxin  binding.  For  this  reason,  mouse  models  of  SE/B  expo¬ 
sure  require  addition  of  a  potentiating  molecule,  such  as  lipopolysaccharide  preparations  from  Gram-nega¬ 
tive  bacteria,  along  with  the  toxin  to  model  the  severe  incapacitation  observed  in  primates  exposed  to  SE/ 
B  alone.  Recently,  it  has  become  possible  to  test  SE/B  vaccine  candidates  in  transgenic  mice  expressing 
human  leukocyte  antigen  (HLA)-DR3  and  human  CD4  molecules,  in  the  absence  of  murine  major  histo¬ 
compatibility  complex  (MI  IC)  class  II  molecules  (see  ref.  110.  DaSilva,  L.,  et  al.  (2002)  Humanlike  immune 
response  of  human  leukocyte  antigcn-DR3  transgenic  mice  to  staphylococcal  enterotoxins:  a  novel  model 
for  superantigen  vaccines.  J.  Infect.  Dis.  185(12),  1754—1760.)  This  animal  model  eliminates  the  need  for 
toxin  potentiation  with  lipopolysaccharide. 
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5.  RICIN  TOXIN 

Ricin  is  a  disulfide-bonded,  heterodimeric  toxin  from  the  seeds  of  Ricinus  commu¬ 
nis  (castor  bean  plant)  that  has  been  recognized  as  a  potential  toxin  weapon  since  World 
War  I  (118).  Although  much  less  lethal  by  weight  than  BoNT  or  SE  (119-121 ),  ricin  is 
nevertheless  a  potent  BW  agent  because  sublethal  doses  cause  incapacitating  pulmo¬ 
nary  damage  and  because  the  toxin  is  widely  available;  the  castor  bean  plant  is  culti¬ 
vated  worldwide  for  several  beneficial  applications,  and  the  toxin  is  easily  extracted 
from  common  byproducts  of  the  seeds  (122,123). 

Entry  of  ricin  into  target  cells  is  greatly  enhanced  by  the  ricin  B-chain  (RTB);  RTB 
is  a  galactose-specific  lectin  that  binds  receptors  on  the  surface  of  target  cells,  thereby 
promoting  endocytosis  and  trafficking  to  the  trans  Golgi.  The  ricin  A-chain  (RTA)  is  a 
multidomain  iV-glycosidase  that  depurinates  a  specific  adenosine  of  the  essential  60S 
ribosomal  RNA  (rRNA)  subunit  (reviewed  in  ref.  124).  Once  eukaryotic  rRNA  has 
been  damaged  in  this  way,  the  target  cell  cannot  synthesize  new  protein  and  inevitably 
will  die.  Ricin  is  representative  of  a  diverse  class  of  “ribosome  inactivating  proteins” 
(RIPs)  that  includes  the  plant  toxins  abrin,  modeccin  and  viscumin,  as  well  as  several 
potent  bacterial  toxins  (125,126). 

Human  poisoning  by  ricin  aerosol  exposure  is  not  documented,  but  based  on 
extrapolation  from  accidental,  human  sublethal  exposures,  the  signs  and  symptoms  are 
likely  to  include  high  fever,  dyspnea,  and  coughing  that  is  delayed  for  4-8  h  after 
exposure  (123,127,128).  In  nonhuman  primates,  aerosolized  ricin  causes  a  dose- 
dependent  set  of  signs  that  is  delayed  from  8  to  24  h;  anorexia  and  lethargy  are  fre¬ 
quently  observed.  In  one  study  of  rhesus  monkeys  exposed  to  approx  20-40  pg/kg  of 
non  aerosol,  death  occurred  by  acute  respiratory  distress  about  36^18  h  after  expo¬ 
sure;  necropsy  revealed  fibrinopurulent  pneumonia,  acute  inflammation  of  trachea  and 
airways,  and  massive  pulmonary  alveolar  flooding  (129). 

5.1.  Ricin  Toxoid  Vaccines 

Toxoid  vaccine  prepared  from  formalin-inactivated  ricin  holotoxin  was  developed 
during  World  War  II  and  shown  to  enhance  survival  significantly  in  animals  exposed 
to  ricin  (118).  An  improved  ricin  toxoid  vaccine  based  on  denatured  toxin  adsorbed  to 
Alhydrogel  adjuvant  was  developed  at  USAMRIID  in  the  1990s  and  shown  to  be  effec¬ 
tive  at  protecting  rhesus  monkeys  against  ricin  toxin  aerosol  exposures.  All  vaccinated 
monkeys  survived  a  supralethal  ricin  aerosol  challenge;  however,  as  with  earlier  studies, 
vaccination  did  not  protect  completely  against  short-term  (up  to  14  d  postexposure)  bron- 
chiolar  and  interstitial  pulmonary  inflammation.  The  general  failure  of  toxoid  vaccines  to 
protect  the  respiratory  tract  of  exposed  animals  from  the  cytotoxic  effects  of  ricin  under¬ 
scores  the  need  to  develop  effective  recombinant  vaccines  and  alternative  vaccine-deliv¬ 
ery  systems  that  can  elicit  an  enhanced  mucosal  immune  response  (121,130). 

5.2.  Deglycosylated  Ricin  A-Chain  Vaccine 

RTA  conjugated  with  tumor-specific  antibodies  has  been  used  clinically  as 
medicotoxin  to  target  and  kill  tumors  in  animals  and  humans  (131,132).  Supporting 
studies  with  RTA-antibody  conjugates  contributed  to  the  development  of  a  recombi¬ 
nant  ricin  vaccine  because  they  demonstrated  unequivocally  that  RTA  is  much  less 
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toxic  than  is  the  whole  toxin  when  administered  parenterally  to  animals  in  the  absence 
of  the  RTB  (133,134). 

During  the  early  1990s,  researchers  at  USAMRIID  demonstrated  that  purified  RTA 
can  act  as  an  effective  immunogen  in  animals  to  elicit  antibodies  that  neutralize  whole 
ricin  toxin  (135,136).  A  suitable  lot  (meeting  current  Good  Manufacturing  Practices) 
of  chemically  degylosylated  (dg)  RTA  subsequently  was  produced  from  the  natural 
toxin  and  shown  to  protect  against  supralethal  ricin  aerosol  challenges  in  two  animal 
models.5  However,  technical  limitations  were  raised  regarding  the  use  of  RTA  or 
dgRTA  as  a  human  vaccine  candidate;  both  immunogens  retain  residual  /V-glycosidase 
activity  and  show  significant  aggregation  during  expression,  purification,  or  upon  pro¬ 
longed  storage  in  solution. 

Recombinant  vaccine  candidates  with  active-site  specific  substitutions  designed  to 
reduce  the  N-glycosidase  activity  of  RTA  without  disrupting  the  antigenic  properties 
of  the  molecule  have  been  proposed  as  vaccine  candidates  (135,137-139).  Some  of 
these  recombinant  candidates  also  have  been  altered  to  remove  a  putative  “vascular 
leak  peptide”  sequence  reported  to  contribute  to  the  toxicity  observed  with  very  high 
levels  of  RTA  used  in  immunotoxin  chemotherapy  studies  (132,139).  Active-site  sub¬ 
stitutions  in  RTA  essentially  eliminate  the  problem  of  residual  toxic  activity  but  do  not 
address  the  important  manufacturing  problem  of  RTA  instability  and  aggregation. 

5.3.  Engineered  Ricin  Vaccines 

Olson  recognized  that  the  tendency  of  subunit-based  RTA  vaccines  to  self-aggregate 
under  physiological  conditions  was  related  to  hydrophobic  domains  exposed  by  the 
absence  of  the  natural  RTB  subunit.  Starting  from  a  theoretical  analysis  of  the  func¬ 
tional  architecture  of  the  toxin  compared  with  related  single-chain  RIPs  (140-142),  it 
was  hypothesized  that  reducing  the  hydrophobic  surface  of  RTA  by  large-scale  dele¬ 
tions  might  result  in  a  better  structural  platform  for  presenting  the  neutralizing  epitope 
than  that  of  the  parent  molecule. 

Along  with  a  reduced  hydrophobic  surface,  recombinant  vaccine  candidates  were 
required  to  retain  the  surface  loop  that  is  believed  to  serve  as  a  neutralizing  immuno¬ 
logical  epitope  for  ricin  toxin  (RTA  residues  97-106;  ref.  137).  Candidates  also  were 
required  to  lack  key  amino  acid  residues  of  the  RNA  binding  site  that  are  essential  for 
toxic  IV-glycosidase  activity.  From  experimental  trials  with  a  range  of  recombinant 
RTA  candidates,  we  found  that  immunogens  based  approximately  on  the  /V-terminal 
domain  of  RTA  (residues  1-198)  best  satisfied  the  design  criteria  (Fig.  4). 

Under  physiological  conditions,  polypeptides  based  on  RTA1-198  remain  folded  as 
judged  by  circular  dichroism  and  infrared  spectroscopy,  are  more  stable  thermody¬ 
namically  than  is  RTA,  and  exhibit  dynamic  light  scattering  indicating  monodisperse 
monomers  without  significant  aggregation.  Moreover,  the  single-domain  immunogens 
show  no  detectable  toxin  activity  and  protect  mice  against  supralethal  exposure  to  ricin 
toxin  by  injection  or  by  aerosol.  In  this  case,  protein  engineering  based  partly  on  a 
functional  analysis  of  protein  domains  has  yielded  ricin  vaccine  candidates  that  are 
superior  to  traditional  approaches,  including  inactivated  holotoxin  or  toxin  subunit  vac¬ 
cines  containing  simple  active-site  mutations. 


Unpublished  observations  of  Dr.  R.W.  Wannemachcr,  USAMRIID,  Fort  Detrick,  MD  21010. 
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delivered  by  genetically  engineered  bacteria  or  viruses  in  unnatural  amounts  or  combi¬ 
nations  to  the  wrong  organ,  target  cell,  or  compartment;  examples  of  such  adventitious 
“toxins”  may  include  polypeptide  hormones,  growth  factors,  and  cytokines  or  other 
immune  system  modulators  (146). 

It  is  clear  that  if  toxins  are  considered  in  the  context  of  genetically  engineered  mi¬ 
crobes,  then  it  is  not  possible  at  present  to  delimit  the  complete  set  of  potential  protein 
toxins.  However,  if  we  assume  that  engineered  protein  toxin  weapons  initially  will 
likely  employ  or  modify  existing  natural  toxin  scaffolds  or  functions,  then  the  problem 
becomes  more  tractable.  Such  future  threats  might  involve,  for  example,  the  conver¬ 
sion  of  structural  neighbors  of  known  toxins  into  closely  related  toxins;  novel  chimeras 
comprising  known  toxin  subunits  or  domains;  or  protein  engineering  and  co-/post- 
translational  modifications  employed  to  defeat  natural  immunity,  approved  vaccines, 
or  detection  systems. 

Although  the  rational  design  of  protein  toxins  remains  largely  impractical  at  present, 
biotechnology  and  understanding  of  protein  structure  have  started  to  test  this  limit  in  two 
specific  areas:  (a)  subunit  combinations  to  create  toxin  chimeras,  and  (b)  building  upon 
common  structural  scaffolds  to  transfer  function  among  polypeptide  toxins.  Growing 
interest  in  these  areas  is  driven  by  potential  benefits  of  medicotoxins,  as  well  as  the  power 
of  using  toxins  in  basic  biomedical  research  to  selectively  perturb  biological  systems. 

6.1.  Protein  Toxin  Chimeras 

Many  protein  toxins  operate  by  combining  relatively  diverse  functions,  such  as  bind¬ 
ing  receptors  on  target  cells,  promoting  toxin  internalization  (membrane  translocation), 
intracellular  trafficking  to  target  compartments,  and  subsequently  exerting  a  toxic 
intracellular  effect  such  as  hydrolysis  of  an  essential  cellular  component.  The  structure 
of  natural  toxins  often  exhibits  a  corresponding  multiplicity,  with  functions  partitioned 
among  different  polypeptide  subunits  or  domains.  During  the  past  several  years,  it  has 
become  possible  to  attribute  specific  functions  to  toxin  parts  and,  using  protein  engi¬ 
neering,  to  produce  synthetic  toxin  chimeras  composed  of  unnatural  combinations  of 
binding  and  catalytic  subunits. 

Toxin  chimeras  have  been  employed  clinically  to  target  and  kill  unwanted  cell  types 
or  tumors.  This  application  hitches  the  most  deadly  bacterial  toxin  subunits,  often  the 
catalytic  domain  of  a  multichain  RIP  toxin,  to  a  binding  subunit  or  antibody  (so-called 
“immunotoxin”)  that  targets  a  particular  receptor.  For  example,  the  active  subunit  of 
diphtheria  toxin  has  been  conjugated  with  an  epidermal  growth  factor-like  domain  to 
target  cells  expressing  specific  receptors  (147,148).  Similarly,  the  neuron-binding 
domain  of  one  toxin,  such  as  TeNT  or  BoNT  He,  has  been  combined  with  the  diphthe¬ 
ria  toxin  RIP  subunit  (149).  Neurons  also  have  been  targeted  by  chimeras  of  diphtheria 
toxin  RIP  subunit  and  modified  substance  P;  the  result  is  a  directed  protoxin  that  is 
activated  by  a  specific  posttranslational  modification  (150). 

It  has  been  shown  that  there  is  a  degree  of  permissiveness  in  the  types  of  catalytic  or 
functional  subunits  that  can  be  delivered  into  mammalian  cells  by  toxin  binding  and 
translocation  processes.  For  example,  the  catalytic  domains  from  two  of  the  most  deadly 
bacterial  toxins  known,  TeNT  and  Shiga  toxin,  have  been  combined  with  the  anthrax 
toxin  ensemble  to  produce  cytotoxins  that  will  target  a  broader  class  of  mammalian  cell 
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types  (151,152).  Likewise,  bacterial  toxin  translocation  systems,  for  example,  the  pore- 
forming  toxin  streptolysin-O,  are  being  developed  as  a  means  of  intracellular  delivery 
of  relatively  large  (approx  100  kD)  unrelated  toxin  subunits  (153). 

Synthetic  toxin  chimeras  are  of  interest  in  BW  defense  because,  although  they  are 
expected  to  be  less  potent  than  parent  molecules  generally,  the  chimeras  may  result  in 
confusing  medical  signs  and  symptoms.  Chimeras  also  pose  a  challenging  dilemma  for 
medical  diagnostics  of  BW  casualties  by  reacting  with  detection  systems  for  one  toxin 
while  carrying  the  biological  functionality  Of  another. 

6.2.  Modification  of  Natural  Toxin  Scaffolds 

Protein  engineers  currently  lack  understanding  sufficient  to  permit  de  novo  design 
and  production  of  new  toxins  that  are  significantly  more  potent  than  the  parent  mol¬ 
ecules.  However,  it  has  become  increasingly  feasible  to  engineer  controlled  modifica¬ 
tions  into  existing  protein  toxin  structures.  The  widespread  appearance  of  diverse 
protein  and  polypeptide  toxins  in  animal  venoms  has  led  to  the  manipulation  of  certain 
stable,  natural  protein  scaffolds  for  the  design  or  transfer  of  toxic  function. 

One  permissive  toxin  scaffold  is  the  “three-finger”  fold  employed  by  a  number  of 
single  polypeptide  chain  animal  toxins  (154).  This  toxin  family  fold  is  based  on  what  is 
primarily  a  (3-sheet  protein  core  that  is  greatly  stabilized  by  disulfide  bonds  coupled 
with  highly  variable  surface  loops  that  tolerate  significant  structural  changes  because 
of  the  stability  of  the  protein  core.  Menez  et  al.  applied  structural  and  molecular  biol¬ 
ogy  to  alter  venom  toxin  binding  specificity  in  the  design  and  synthesis  of  a  hybrid 
toxin  that  retams  more  than  50%  identity  to  one  toxin  (toxin-a),  while  binding  the 
natural  target  molecule,  acetylcholinesterase,  of  a  second  toxin,  fasciculin-II  (FASH), 
with  high  affinity  (155).  A  model  of  residues  essential  for  binding  of  FASH  with  ace¬ 
tylcholinesterase  was  proposed  based  on  primary  sequence  and  structural  homologies 
among  a  large  number  of  three-finger  snake  toxins,  as  well  as  the  solved  three-dimen¬ 
sional  structure  of  the  FASII-acetylcholinesterase  complex  (156).  Although  the  work 
is  remarkable  for  demonstrating  the  transfer  of  function  from  one  toxin  (FASH)  onto 
the  sequence  of  another,  the  hybrid  toxin  is  much  less  potent  than  FASII,  underscoring 

the  limitations  of  understanding  protein-protein  interactions  from  structural  studies 
alone. 

Another  permissive  protein  toxin  scaffold  may  be  the  disulfide-stabilized  cc-p-fold 
employed  in  large  families  of  scorpion  venoms  (reviewed  in  ref.  157).  Zilberberg  et  al 
applied  site-directed  mutagenesis  to  modify  the  binding  specificity  of  a  scorpion  neu- 
rotoxm  (Lqh  a  IT)  (158).  Additionally,  the  potency  of  one  long-chain  scorpion  toxin 
(BotlX)  could  be  enhanced  by  the  transferring  select  residues  from  a  scorpion  alpha 
toxin  (Lqh  a  IT)  (159).  F 

Small,  structural  mimics  of  natural  protein  toxins  are  also  a  concern  for  the  future. 
Hie  increasingly  fine  detail  available  for  how  polypeptide  toxins  bind  to  critical  cell 
receptors  or  ion  channels  may  result  in  the  development  of  toxic,  low-molecular-weight 
oligopeptides  or  peptide  mimetics.  Venoms  from  Conus  hunting  snails  provide  a  natu¬ 
ral  example  of  how  relatively  small  polypeptides  can  produce  a  large  repertoire  of 
stable,  diverse  and  functionally  synergistic  toxins  (“conotoxins”  reviewed  in  ref.  160). 
Peptide  mimetics  that  carry  some  of  the  toxicity  of  the  holotoxin,  but  with  a  much 
ower  molecular  weight  and  greater  stability,  may  effectively  enhance  the  potency  of 
known  toxins. 
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7.  CONCLUSION 

During  the  past  decade,  effective  vaccine  candidates  for  several  of  the  most  danger¬ 
ous  toxin  weapons,  including  BoNT,  SE/B,  and  ricin,  have  been  designed,  produced,  or 
improved  by  protein  engineering.  Vaccination  remains  the  foundation  of  effective 
medical  protection  against  macromolecular  threats,  but  it  is  clearly  impractical  and,  in 
some  scenarios,  unethical  to  vaccinate  against  all  possible  threat  molecules.  Addition¬ 
ally,  there  are  military  operational  requirements  for  which  BW  vaccination  regimens 
that  require  weeks  to  months  may  be  too  slow  or  inflexible.  Effective  toxin  therapies, 
such  as  engineered  human  antitoxins  or  small-molecule  antagonists,  are  needed  as 
adjuncts  or  replacements  for  vaccination. 

Future  directions  include  reducing  the  size  and/or  increasing  the  binding  stoichiom¬ 
etry  of  antitoxin  molecules.  Protein  engineering  of  catalytic  scavengers  has  shown 
increasing  promise  as  a  potential  medical  countermeasure  for  low-molecular-weight 
toxins  (161,162),  and  it  may  become  possible  to  develop  catalysts  that  combine  the 
binding  specificity  of  antitoxins  with  protease  activity  to  selectively  catalyze  the 
hydrolysis  or  inactivation  of  protein  toxins.  Design  or  development  of  irreversible  pro¬ 
tease  inhibitors  as  prophylactic  antitoxins  also  merits  increased  emphasis. 

This  review  intentionally  emphasizes  how  protein  engineering  can  be  applied  in 
medical  research  to  effectively  shorten  the  timescale  of  evolving  natural  defenses 
against  toxins.  This  approach  holds  out  tremendous  promise  for  protection  against  many 
known  chemical  and  BW  agents,  provided  the  toxin  does  not  change  structure  appre¬ 
ciably  during  the  lifetime  of  the  vaccine  or  therapy.  A  darker,  competing  view  holds 
that  biotechnology,  combined  with  an  open  scientific  literature,  may  have  the  same 
powerful  accelerating  effect  on  emergence  or  creation  of  novel  threat  agents  to  con¬ 
found  our  engineered  vaccines  or,  alternatively,  to  short-circuit  natural  immune  pro¬ 
cesses. 

A  key  resource  for  devising  better  medical  protection  remains  analyzed,  high-reso- 
lution  structural  biology  data.  Existing  bioinformatics,  computational  chemistry,  and 
structural  biology  tools  for  large-scale,  comparative  analysis  of  solved  protein  struc¬ 
tures,  and  mechanisms  can  be  applied  to  protein  toxins  (163—165).  Knowledge  of  the 
set  of  structural  “building  blocks”  for  natural  protein  toxins  will  emerge  and  may  serve 
to  improve  medical  products  for  simultaneous  neutralization  of  multiple  toxin  weap¬ 
ons.  We  must  remain  cognizant,  however,  that  the  growing  markets  for  beneficial 
medicotoxins  against  a  range  of  human  illnesses  will  continue  to  drive  protein  engi¬ 
neering  of  toxin  chimeras,  as  well  as  new  means  to  develop  tolerance  or  defeat  immu¬ 
nity  to  extend  the  clinically  useful  lifetime  of  toxin-based  drugs.  Consequently, 
researchers  with  a  commitment  to  medical  defense  against  BW  agents  should  expect 
increasingly  to  wield,  as  well  as  to  encounter,  the  double-edged  sword  of  protein  engi¬ 
neering. 
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